Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kerberos Golden Ticket PAC Updates for the Nov2021 Microsoft Updates #380

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

JoeDibley
Copy link

New switch for Golden::Kerberos /oldpac for original behavior for unpatched domain controllers (or patched domain controllers where PacRequestorEnforcement = 0 or 1).

New fields added:

  • UPN_DNS_INFO
  • PAC_REQUESTOR
  • PAC_ATTRIBUTE_INFO

Requires #368 to build without warnings.

Links:

@cnotin
Copy link

cnotin commented Feb 24, 2022

Interesting PR :)
Looks like PAC_ATTRIBUTES_INFO is not declared though. Shouldn't it be created like in your other closed PR?
https://github.com/gentilkiwi/mimikatz/pull/379/files#diff-ab813c3eae657d6a046ca00057a7a32bf229a161f9f957821468bc195c870f84R32-R40

New switch for Golden::Kerberos /oldpac for original behaviour for unpatched domain controllers.

New fields added:
- UPN_DNS_INFO
- PAC_REQUESTOR
- PAC_ATTRIBUTE_INFO
@JoeDibley
Copy link
Author

@cnotin Thanks for this. Looks like i lost the changes when making the merge more presentable. I have amended the commit to now include the changes in kull_m_rpc_ms-pac.h as looks like i just missed the file completely. This should now be ready to go

@cnotin
Copy link

cnotin commented Feb 25, 2022

It compiles and work fine now, even against PacRequestorEnforcement=2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants